6cb5b395d9c662c801442e06abae9b466737597c78fc55f61ea94a5d127ba805

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23/05/2024, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6b9d4507f9eaf3e2189cb6b9100c739d_JaffaCakes118.html
Size

59KB
MD5

6b9d4507f9eaf3e2189cb6b9100c739d
SHA1

57f78083d1562fdf26283680cae1e2e928dcf0e3
SHA256

6cb5b395d9c662c801442e06abae9b466737597c78fc55f61ea94a5d127ba805
SHA512

67661aae2f923722a2817480e974475cfcfccc53c708ff8b86d9e7186ccb8d8b1d60eda2cbd59a0be5b1769714ee2ec47c1a4984cdff0bef9ff223f31ad980c0
SSDEEP

768:egOriWNcaSoagGTAqzaRgI+6+UIryjQiHdB1tDwNnnVc2Srg:J/FAqvI+tnnVv

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4968	msedge.exe
4968	msedge.exe
1668	msedge.exe
1668	msedge.exe
4848	identity_helper.exe
4848	identity_helper.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe
1668	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1668 wrote to memory of 3304	1668	msedge.exe	83
PID 1668 wrote to memory of 3304	1668	msedge.exe	83
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4368	1668	msedge.exe	84
PID 1668 wrote to memory of 4968	1668	msedge.exe	85
PID 1668 wrote to memory of 4968	1668	msedge.exe	85
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86
PID 1668 wrote to memory of 1684	1668	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6b9d4507f9eaf3e2189cb6b9100c739d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8a47946f8,0x7ff8a4794708,0x7ff8a4794718
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2916 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,13371333028175021313,1066386121659010273,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1824 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2460

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:888

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3812

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
59466aad3226691e089681cc63bce91a

SHA1
dd6e295b21cc9589c702293a519210e9e5fdcbc1

SHA256
374f2fdd9c266926f33a115e0c023c0c7bd6e2b5f098dbb0fa43d78f21eab7e4

SHA512
527a11dd0526c2c1b3247fcb7374d928a03d3987ad5b5a95ebcafec4d3227070a54081c3e30b0a1d1f3f70045bbcfc468bab3a16a3397a5b11e95e3236a61eac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4a7d4197c26cef5442f5c5127cc5d067

SHA1
6b445fa706e6a5435620168e563c0c3beb80b7bc

SHA256
f9e9534dabed0d8c6cf03cf5d369ad8e7e858c47e26c7c55a1bc0551ba04df9c

SHA512
b81bf4ab3a6c5b7cf5979f9ff90b9ef4fc96198a36c8ca643c872473be48223c60c6f57205f4cce188984cfbb44ee9bfefe763ef4f77ea12186857c1d191d687

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c1fec6f05e226fe54b5181ff8b46f454

SHA1
715ff7cec02a2c0d11f70ca0dd3b0716293aff6d

SHA256
dfec833bd749f587b6b742836c2ccb00c4d356cc13c299e607e671d12cf46d78

SHA512
7fb6bfdb851b05e65c812ac35ec8cefc30f73d41a4eaf30b47d8f57f20419dd886c76e0cbc1cac27c06535c6c80b526d66862fed9fefeaa57ca1edbac0d94523

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
490ec9582a451699ec7d3aff22961216

SHA1
1631737d334e0cc234c5a352eef4ebe04c18712a

SHA256
f3d8687e65371261846fa04d64d846b22008b346d9fd9bd5609b3f0e734ceb9e

SHA512
d206cc5f1fe496993bb2552f870c486f2d276da682e9acb965a145cb99fda8e838892a087b1f38b987df4cd65b910b3ec4acdba91267998b6a0442e72dbc2125

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
843beb3470f6384dd15e534c0ac48adf

SHA1
1259ef1d21311e1a6df9cd6daada1a940ce25213

SHA256
eee8857a15050ceca91abbb537d296233ca20f05b436140b2fcdefff6082b2d1

SHA512
d13387c801bfc4316bc9380f002a0170268d4894e361f5e94abe7af9b5a9a9a99454f78034ce2e83e28a81fda937d3f3dcab1a8b6fa8eba1c09f1f3c9241e4e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
3a7a24fdd2087b85279400065ab47411

SHA1
8c8eaf3965bf671e6b0982ce69db325676a5ae46

SHA256
696d786a4d2fbe978f68821679b0cf3295f6f8c5ec3c4784862172efb86206a2

SHA512
b78b88108d7a030f70cc0b8543614f5d8219847404c87d15d154b564f56ff9f9bea339f55fa64fa3e6cad9d1e1a945b1f2e16bd3b8a2471e8523c3e601587938

Download Submit